[merberg-ai]

FM3.2d final scope

• One operator-confirmed inspection of an active, watched FM1 friend only when the global Scout switch is enabled; manual INSPECT PUBLIC ACTIVITY phrase, authenticated existing six-field POST.
• Up to 3 anonymous HTTPS GETs to the existing fixed Moltbook host: one matching profile and two ID/author/optional UUID-matched recent public posts. No redirects, credentials, user-entered URLs or automatic scans.
• Local SHA-sealed snapshot of bounded public material, job statuses and private history. Public profile data are API-reported, not proof of identity or friendship.
• Optional zero/one local Ollama reaction from first source-linked post. Separate owner approve/reject/reopen, digest-checked history; an accepted reaction stays local and does not affect FM1 notes, PM2 memory, identity, Scout weighting, auto-publisher or Moltbook.
• Hard limits: one active job, 15-minute global cooldown, 6-hour per-friend cooldown, 6 requests/24h and 100 local job cap. Failures consume cooldown. Recheck friend/watch state before and after network + local model, discard on pause, mute, archive or global disable. Interrupted jobs fail without retries.
• Two managed files: existing bob_friend_scout.py and generated bob-activity-manager; pinned builder changes only worker import and post-commit thread dispatch.
• Release v0.7.5-fm32c-localideas1 → v0.7.5-fm32d-focus1, via bobctl update with existing authenticated LAN, backup/rollback and service restart. No new installed module/timer/permissions.
• New synthetic tests cover source-bound fetches and identity mismatches, bounded request budget, cooldowns, confirmation and watch controls, pause-mid-job, local AI response and escaping, tamper rejection, owner-reviewed reversible history, and exact security-preserving manager delta.
• Documentation docs/V075-FM32D-MANUAL-FOCUS.md, roadmap checkpoint.

Roadmap hold: FM3 complete only after operator acceptance. FM4 and FM5 explicitly paused while operator resolves other issues and ships a separately requested feature. No speculation about its details. Neither this PR nor merge starts further FM work.